Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: jPQ+mZaGICVXt7XsVXgpRR05vlllOoFIZ6FsLE/N364=
Subject key identifier: 54:61:02:9E:18:02:49:30:86:69:3A:FB:28:76:E9:8D:0A:BE:C3:8E
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 019FAA87AFCB88240202034AD690EC9851C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 1974
Signing time: Tue 28 Jul 2026 21:00:46 +0000
Manifest this update: Tue 28 Jul 2026 21:00:46 +0000
Manifest next update: Wed 29 Jul 2026 21:00:46 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: ejYDUdeAah1WuthajQAB+evOoSbtoWawp85Rx7Tx2Dg=)
2: zw3c904rq4xChP-j73nfIGIlebY.roa (hash: KMDvgbQdyiONiqKh0BKewAjFO3rlCRJWvQUeCqo5FZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:af:cb:88:24:02:02:03:4a:d6:90:ec:98:51:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: Jul 28 21:00:46 2026 GMT
Not After : Jul 29 21:00:46 2026 GMT
Subject: CN=5461029e1802493086693afb2876e98d0abec38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:78:c1:02:8d:46:3e:23:cb:83:2b:ff:dc:00:
72:71:a4:7e:64:ca:f7:e7:4d:ff:9b:bd:c0:53:03:
3e:e9:13:33:a9:ee:c6:61:9f:a9:75:02:5c:9c:04:
23:33:e7:3a:43:a1:55:29:0c:18:3f:83:a9:c4:03:
ee:bf:a9:f6:ff:66:2e:c8:45:54:d2:fb:40:6a:bd:
7a:96:7a:ff:27:16:68:7f:a7:ce:de:e2:8a:0f:2c:
1b:3d:b5:97:b0:28:29:93:fd:cf:ce:d1:22:fb:a0:
8f:45:fe:99:87:e4:e5:54:b0:08:46:8e:dd:a8:02:
c0:5b:cc:b3:6b:47:fe:e6:e5:06:b8:5f:56:d2:eb:
a3:c9:71:db:e0:a1:6f:1d:f2:60:f1:22:18:9c:31:
42:75:fb:1e:05:7e:ea:47:78:89:6b:2f:62:83:4c:
db:ba:3a:3a:91:13:cf:1b:52:07:2f:56:07:8b:fa:
e4:de:0c:e3:ed:83:2c:6d:ac:d2:34:55:f5:f9:aa:
4e:e3:a0:1a:09:96:bb:1b:fb:d0:02:b5:2c:c6:0d:
61:2b:00:f8:cc:94:dc:67:5d:62:94:29:6a:e4:42:
69:9e:9d:fa:13:71:e7:b9:db:30:37:bf:90:0c:5e:
3e:cf:d5:cc:3c:61:1d:46:cb:6b:5e:33:12:46:a0:
ff:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:61:02:9E:18:02:49:30:86:69:3A:FB:28:76:E9:8D:0A:BE:C3:8E
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:88:24:23:cf:47:73:50:20:0f:60:d0:b5:f0:a2:fe:58:a8:
02:01:fe:e4:cf:32:8e:03:34:98:69:7e:fb:45:f3:db:1a:d9:
d8:99:6a:68:a1:55:c6:68:7a:e8:1d:6e:c7:ff:d4:b8:1e:b9:
71:37:98:4c:5f:b7:62:10:29:e8:96:a1:aa:61:25:cc:ea:a0:
8b:be:83:0c:03:9d:f0:51:56:1a:b4:c4:98:a1:62:4d:83:0c:
98:11:51:6c:34:79:6e:6f:5a:9b:c9:ac:90:12:14:78:b0:91:
00:94:a2:e3:9c:00:d7:25:8b:9e:f9:2a:14:8b:4c:95:b0:22:
f5:01:db:34:12:79:b0:41:b5:ec:0c:38:5a:e2:a4:e4:58:fe:
ce:8f:87:51:8a:61:b9:87:00:64:0e:7a:a1:00:a3:7c:bf:3b:
13:a9:e9:78:15:97:65:f1:47:46:e1:f5:05:76:0d:e5:9b:11:
98:c3:75:66:a4:37:79:42:4f:b7:a2:9f:f2:e4:a2:e7:31:55:
f5:5f:84:71:9b:db:40:d1:5f:a3:4e:b0:e0:9a:83:f9:34:21:
4a:ba:82:91:6b:80:20:fe:00:37:19:ab:ee:0e:ab:df:33:3b:
f8:8f:20:d2:67:6a:35:0b:42:69:e4:b5:4d:a5:64:c8:56:31:
e3:8c:23:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:01:29 2026 by rpki-client